Approved changes feed: RSS · Atom

cpe:2.3:a:bestpractical:request_tracker:3.6.11:*:*:*:*:*:*:*

part: a version: 3.6.11 update: *

VendorBestpractical (d11f033e-f22b-5ad6-b9aa-22eb35718329)
ProductRequest Tracker (fee70a71-3857-5843-ba77-7570d7c72d76)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bestpractical/rt purl2cpe 2026-06-01 10:13:30.967884

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9472 vulnerable 2026-06-08 05:06:11.854737 Details available
The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted email.
Published: 2015-03-09T14:00:00.000Z
Updated: 2024-08-06T13:47:40.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3525 vulnerable 2026-06-08 05:04:31.898656 Details available
SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ShowPending parameter. NOTE: the vendor disputes this issue, stating "We were unable to replicate it, and the individual that reported it retracted their report," and "we had verified that the claimed exploit did not function according to the author's claims.
Published: 2013-05-10T21:00:00.000Z
Updated: 2024-08-06T16:14:56.220Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.